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DETAILED ACTION 

1. Applicant's response filed on August 30, 2007 has been carefully 
considered. Claims 1-9, 12, 16-20, 22, 26, 28, 29, 31-34 and 36 have been amended. 
Claim 21 has been canceled. Claims 1-20, 22-36 are pending. 

Claim Objections 

2. Claim 12 objected to because of the following informalities: Claim 12 
contains the following statement: "Processing the digital object in response to receiving 
the REJECT response". However, the specification states that "removing the digital 
object if a REJECT response is received from the at least one cancellation server." (see 
page 6, paragraph [0013] of specification). 

Appropriate correction is required. 



Claim Rejections - 35 USC § 103 

3. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for 
all obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as 
set forth in section 102 of this title, if the differences between the subject matter sought to be 
patented and the prior art are such that the subject matter as a whole would have been obvious 
at the time the invention was made to a person having ordinary skill in the art to which said 
subject matter pertains. Patentability shall not be negatived by the manner in which the invention 
was made. 
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4. Claims 1-20, 22-36 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Juels et al. (U.S. Patent No. 7,197,639 B1) in view of Landsman et 
al. (U.S. Pub. No. 2005/0055410 A1), hereinafter "Landsman". 

Referring to claims 1. 28. 36 : 
i. Juels teaches: 

A cancellation server of a digital delivery system, the cancellation 
server communicatively coupled to at least one database, and configured for executing 
the steps of: 

receiving an identifier associated with a cryptographic puzzle 
attached to a digital object intended for delivery to a receipient (see figure 2, element 
270 'communicate verification of the correct results of the task'; column 19, lines 38-47 ' 
Note that to prevent an adversary from using the same solved puzzle for multiple 
allocations, the server 120 must ensure that only one slot in B is allocated for each 
request M.sub.i. One way to accomplish this is to let some unique identifier derived 
from M.sub.i.sup.1 [i.e., request] be associated with the slot allocated for M.sub.i. On 
receiving a correctly solved puzzle corresponding to M.sub.i, the server 120 checks that 
no slot has been allocated for it already. One means of enabling a rapid search for 
alreadv-used identifiers would be to assign slots through bucket hashing on identifiers.'; 
column 7, line 59 - column 8, line 26; and column 17, lines 59-65, of Juels); 

Validating the identifier by verifying that the identifier does not exist 
in the at least one database (see column 16, lines 25-27 'In an another embodiment, the 
server 120 does not accept more than one or more than a limited number of solutions to 
a particular puzzle from a client 1 1 0.', of Juels); and 

Upon validating, canceling the cryptographic puzzle and storing in at 
least one database, an entry comprising the identifier or information derived from the 
identifier (see figure 2, element 280 'validate verification of the correct results of the 
task'; column 19, lines 38-47; and column 7, line 59 - column 8, line 26, of Juels). 
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Juels disclose searching for already-used identifiers in a database 
[i.e., "bucket hashing on identifiers"]. However, Juels does not specifically using the 
term database. 

ii. Landsman teaches a method of managing electronic messages 
wherein Landsman discloses the database (see page 4, paragraph [0042] of 
Landsman). 

iii. It would have been obvious to a person of ordinary skill in the art at 
the time the invention was made to combine the teaching of Landsman into the method 
of Juels to couple the cancellation server to a database. 

iv. The ordinary skilled person would have been motivated to have 
applied the teaching of Landsman into the system of Juels to couple the cancellation 
server to a database, because it's well known in the art that the database can store and 
keep track of information. Therefore Landsman's teaching could enhance Juels's 
system. 

Referring to claims 2-3 : 

Juels and Landsman teach the claimed subject matter: a cancellation 
server for canceling cryptographic puzzles (see claim 1 above). They further disclose 
transmitting a response (see e.g. figure 5, element 295 'communicate negative 
response allocation acknowledgment' of Juels). 
Referring to claims 4, 29 : 

Juels and Landsman teach the claimed subject matter: a cancellation 
server for canceling cryptographic puzzles (see claim 1 above). They further disclose 
the timestamp (see figure 8, element 510 'time stamp' of Juels). 
Referring to claims 5, 30 : 

Juels and Landsman teach the claimed subject matter: a cancellation 
server for canceling cryptographic puzzles (see claim 1 above). They further disclose 
the range of values (see column 1 1 , lines 46-57 of Juels). 
Referring to claims 6, 34 : 
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Juels and Landsman teach the claimed subject matter: a cancellation 
server for canceling cryptographic puzzles (see claim 1 above). They further disclose 
verifying that the identifier does not exist in the at least one database (see column 16, 
lines 25-27; and column 19, lines 38-47 of Juels). 
Referring to claim 7 : 

Juels and Landsman teach the claimed subject matter: a cancellation 
server for canceling cryptographic puzzles (see claim 1 above). They further disclose 
the hashing (see column 3, lines 12-16 of Juels). 
Referring to claims 8, 31 : 

Juels and Landsman teach the claimed subject matter: a cancellation 
server for canceling cryptographic puzzles (see claim 1 above). They further disclose 
the second server (see column 3, lines 54-62 of Juels). 
Referring to claims 9, 32 : 

Juels and Landsman teach the claimed subject matter: a cancellation 
server for canceling cryptographic puzzles (see claim 1 above). They further disclose 
the database (see page 4, paragraph [0042], lines 3-8 of Landsman). 
Referring to claims 10, 33 : 

Juels and Landsman teach the claimed subject matter: a cancellation 
server for canceling cryptographic puzzles (see claim 1 above). They further disclose 
the network (see column 2, lines 30 of Juels). 
Referring to claims 1 1 , 35 : 

Juels and Landsman teach the claimed subject matter: a cancellation 
server for canceling cryptpgraphic puzzles (see claim 1 above). They further disclose 
the email (see column 1, lines 39-47 of Juels). 
Referring to claim 12 : 

i. Juels teaches: 

A puzzle checker for use in a digital delivery system , the puzzle 
checker communicatively coupled with a cancellation server, and configured for 
executing the steps of: 
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transmitting to the cancellation server, an identifier associated with 
a cryptographic puzzle attached 'to a digital object (see figure 2, element 270 
'communicate verification of the correct results of the task'; column 19, lines 38-47 ' 
Note that to prevent an adversary from using the same solved puzzle for multiple 
allocations, the server 120 must ensure that only one slot in B is allocated for each 
request M.sub.i. One way to accomplish this is to let some unique identifier derived 
from M.sub.i.sup.1 [i.e., request] be associated with the slot allocated for M.sub.i. On 
receiving a correctly solved puzzle corresponding to M.sub.i, the server 120 checks that 
no slot has been allocated for it already. One means of enabling a rapid search for 
already-used identifiers would be to assign slots through bucket hashing on identifiers.'; 
column 7, line 59 - column 8, line 26; and column 17, lines 59-65, of Juels, emphasis 
added); and 

receiving a REJECT response from the cancellation server as a 
result of the identifier being already present in a database of the cancellation server 
(see figure 5, element 285 'reject verification of the correct results of the task'; and 
column 16, lines 25-27 'In an another embodiment, the server 120 does not accept 
more than one or more than a limited number of solutions to a particular puzzle from a 
client 110.', of Juels, emphasis added); and 

Processing the digital object in response to receiving the REJECT 
response (see column 13, lines 31-45 of Juels). 

Juels disclose searching for already-used identifiers in a database 
[i.e., "bucket hashing on identifiers"]. However, Juels does not specifically using the 
term database. 

ii. Landsman teaches a method of managing electronic messages 
wherein Landsman discloses the database (see page 4, paragraph [0042] of 
Landsman). 

iii. It would, have been obvious to a person of ordinary skill in the art at 
the time the invention was made to combine the teaching of Landsman into the method 
of Juels to couple the cancellation server to a database. 
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iv. The ordinary skilled person would have been motivated to have 
applied the teaching of Landsman into the system of Juels to couple the cancellation 
server to a database, because it's well known in the art that the database can store and 
keep track of information. Therefore Landsman's teaching could enhance Juels's 
system. 

Referring to claim 13 : 

i. Juels teaches the claimed subject matter: 

A puzzle checker for verifying solutions to cryptographic puzzles 
(see claim 12 above). However, Juels does not specifically mention removing the 
object. 

ii. Landsman teaches a method of managing electronic messages 
wherein Landsman discloses the removing an object (see page 1, paragraph [0016], 
lines 8-10 of Landsman). 

iii. It would have been obvious to a person of ordinary skill in the art at 
the time the invention was made to combine the teaching of Landsman into the method 
of Juels to add the feature of removing an object. 

iv. The ordinary skilled person would have been motivated to have 
applied the teaching of Landsman into the system of Juels to add the feature of 
removing an object, because when the server rejects verification of the correct results of 
the task and communicate negative resource allocation acknowledgement to the client 
(see figure 5, elements 285, 295 of Juels), the original client's request (see figure 5, 
element 230 'communicate resource allocation request of Juels) need to be removed 
from the server. 

Referring to claim 14 : 

Juels and Landsman teach the claimed subject matter: a puzzle checker 
for verifying solutions to cryptographic puzzles (see claim 13 above). They further 
disclose the filtering (see page 1, paragraph [0010] of Landsman). 

Referring to claim 15 : 
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Juels and Landsman teach the claimed subject matter: a puzzle checker 
for verifying solutions to cryptographic puzzles (see claim 13 above). They further 
disclose the modification (see column 22, lines 8-11 Juels). 
Referring to claim 16 : 

Juels and Landsman teach the claimed subject matter: a puzzle checker 
for verifying solutions to cryptographic puzzles (see claim 13 above). They further 
disclose verifying whether the solution solves the puzzle, and processing the object (see 
figure 2, elements 280 'validate verification of the correct results of the task', 290 
'allocate resource and communicate resource allocation acknowledgment', of Juels). 
Referring to claim 17 : 

Juels and Landsman teach the claimed subject matter: a puzzle checker 
for verifying solutions to cryptographic puzzles (see claim 13 above). They further 
disclose the timestamp (see figure 8, element 510 'time stamp' of Juels), and the 
threshold range of time (see column 13, lines 40-41 'within time T of Juels). 
Referring to claim 18 : 

Juels and Landsman teach the claimed subject matter: a puzzle checker 
for verifying solutions to cryptographic puzzles (see claim 13 above). They further 
disclose the hash of the identifier (see column 19, line 47 'hashing on identifiers', of 
Juels). 

Referring to claims 19-20 : 

Juels and Landsman teach the claimed subject matter: a puzzle checker 
for verifying solutions to cryptographic puzzles (see claim 13 above). They further 
disclose the recipient computer and the intermediate server (see figure 1A, element 12, 
'recipient computer', 16 'recipient server' of Landsman). 
Referring to claim 22 : 

i. Juels teaches: 

A puzzle creator for generating cryptographic puzzles for use in a 
digital delivery system, the puzzle creator configured for executing the steps of: 



Application/Control Number: Page 9 

10/806,020 

Art Unit: 2135 



generating an identifier (see figure 8, element 530 'other data' of 

Juels); 

generating a timestamp (see figure 8, element 510 'time stamp' of 

Juels); 

generating a cryptographic puzzle using the identifier and 
timestamp (see figure 8, elements 540 'input crypto function', 560 'output crypto 
function' of Juels); and 

computing a solution to the cryptographic puzzle (see column 17, 
line59-column 18, line 7 of Juels). 

However, Juels does not specifically mention attaching the puzzle, 
solution, timestamp and identifier to the object. 

ii. Landsman teaches a method of managing electronic messages 
wherein Landsman discloses attaching the authentication certificate to an electronic 
message (see page 2, paragraph [0020], lines 1-5 of Landsman). 

iii. It would have been obvious to a person of ordinary skill in the art at 
the time the invention was made to combine the teaching of Landsman into the method 
of Juels to attach the puzzle, solution, timestamp and identifier to the object. 

iv. The ordinary skilled person would have been motivated to have 
applied the teaching of Landsman into the system of Juels to attach the puzzle, 
solution, timestamp and identifier to an object, because the client and server 
communicate with each other during the session (see e.g. figure 4), it's well known in 
the art to piggyback [i.e., attach] the puzzle, solution, timestamp and identifier to an 
object, such as a response from the server to the client. 

Referring to claims 23-24 : 

Juels and Landsman teach the claimed subject matter: a puzzle creator 
for generating and solving cryptographic puzzles (see claim 22 above). They further 
disclose the string (see figure 7, element 700 'k-bit substring' of Juels). 

Referring to claim 25 : 
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Juels and Landsman teach the claimed subject matter: a puzzle creator 
for generating and solving cryptographic puzzles (see claim 22 above). They further 
disclose the computing (see figure 7, element 560 'output crypto function' of Juels). 
Referring to claim 26 : 

Juels and Landsman teach the claimed subject matter: a puzzle creator 
for generating and solving cryptographic puzzles (see claim 22 above). They further 
disclose receiving a request and transmitting the identifier, timestamp, puzzle and 
solution to the sender (see figure 2, element 230 'communicate resource allocation 
request', element 240 'communicate computation intensive task' of Juels). 
Referring to claim 27 : 

Juels and Landsman teach the claimed subject matter: a puzzle creator 
for generating and solving cryptographic puzzles (see claim 22 above). They further 
disclose receiving from the sender (see figure 2, element 240 'communicate 
computation intensive task' of Juels). 



Response to Arguments 

5. Applicants arguments filed on August 30, 2007 have been fully 
considered but they are not persuasive. 

Applicant argues: 

"Applicants respectfully traverse the Office Action assertion because the 
motivation that has been provided to combine Landsman with Juels is inadequate." 
(page 2, last paragraph, Applicant's Arguments/Remarks) 

Examiner maintains: 

Juels teaches a method for protecting a server from connection depletion attack 
via generating a puzzle and a puzzle solution in "Referring to FIG. 7, the puzzle 
generator 130 (FIG. 1) first generates the puzzle data 550, of length L bits, which 
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constitutes an entire puzzle solution ." (see column 15, lines 5-7 of Juels, emphasis 
added). 

Landsman also teaches using the puzzle and the solution in "The challenge 
messages 44 may comprise any of a variety of instructions, puzzles , or other 
information that can cause a properly configured sender computer 10 to perform actions 
that result in the generation of correct responses 46 [i.e., solution]." (see page 4, 
paragraph [0048], lines 1-5 of Landsman, emphasis added). 

Therefore, Landsman's teaching could enhance Juels's method. 

Applicant argues: 

"For example, the Office Action fails to disclose anticipatory art for the steps of: 
"querying the at least one database with the identifier;" the step of "canceling the 
intended recipient's puzzle;" and the portion that cites "the entry comprises the identifier 
or information derived from the identifier." (page 3, 2nd paragraph, Applicant's 
Arguments/Remarks) 

Juels discloses in column 19, lines 38-47 that "Note that to prevent an adversary 
from using the same solved puzzle for multiple allocations, the server 120 must ensure 
that only one slot in B is allocated for each request M.sub.i. One way to accomplish this 
is to let some unique identifier derived from M.sub.i.sup.1 [i.e., generating a puzzle 
identifier] be associated with the slot allocated for M.sub.i. On receiving a correctly 
solved puzzle corresponding to M.sub.i, the server 120 checks that no slot has been 
allocated for it already. One means of enabling a rapid search for already-used 
identifiers [i.e., querying for a puzzle identifier in the database] would be to assign slots 
through bucket hashing on identifiers [i.e., hashing on puzzle identifiers to build a 
database]." (emphasis added). 

Juels further discloses in column 16, lines 25-27 that "In an another embodiment, 
the server 120 does not accept more than one or more than a limited number of 
solutions to a particular puzzle from a client 110 ." (emphasis added). 
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On the other hand, Landsman discloses the deletion functionality [i.e., cancelling] 
in "If the system does not receive a satisfactory response, the system may delete or 
otherwise process the electronic message." (see page 1, paragraph [0016], lines 8-10 of 
Landsman). 

Therefore, the combination of Juels and Landsman disclose "querying the at 
least one database with the identifier;" the step of "canceling the intended recipient's 
puzzle;" and the portion that cites "the entry comprises the identifier or information 
derived from the identifier." 

Applicant argues: 

"While Landsman's database pertains to a list of senders. A pplicants' database of 
claim 1 is associated with identifiers pertaining to cryptographic puzzles. " (page 3, 3rd 
paragraph, Applicant's Arguments/Remarks) 

Juels discloses in column 19, lines 38-47 that "Note that to prevent an adversary 
from using the same solved puzzle for multiple allocations, the server 120 must ensure 
that only one slot in B is allocated for each request M.sub.i. One way to accomplish this 
is to let some unique identifier derived from M.sub.i.sup.1 [i.e., generating a puzzle 
identifier] be associated with the slot allocated for M.sub.i. On receiving a correctly 
solved puzzle corresponding to M.sub.i, the server 120 checks that no slot has been 
allocated for it already. One means of enabling a rapid search for alreadv-used 
identifiers [i.e., querying for a puzzle identifier in the database] would be to assign slots 
through bucket hashing on identifiers [i.e., hashing on puzzle identifiers to build a 
database]." (emphasis added). 

Therefore, Juels discloses a database of claim 1 associated with identifiers 
pertaining to cryptographic puzzles. 



Conclusion 
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6. Applicant's amendment necessitated the new ground(s) of rejection 
presented in this Office Action. Accordingly, THIS ACTION IS MADE FINAL. See 
MPEP § 706.07(a). Applicant is reminded of the extension of time policy as set forth in 
37 CFR 1.136(a). 

A shortened statutory period for reply to this final action is set to 
expire THREE MONTHS from the mailing date of this action. In the event a first reply is 
filed within TWO MONTHS of the mailing date of this final action and the advisory action 
is not mailed until after the end of the THREE-MONTH shortened statutory period, then 
the shortened statutory will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1.136(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the date of this final action. 

Any inquiry concerning this communication or earlier communications from 
the examiner should be directed to Joseph Pan whose telephone number is 571-272- 
5987. 

If attempts to reach the examiner by telephone are unsuccessful, the 
examiner's supervisor, Kim Vu can be reached at 571-272-3859. The fax and phone 
numbers for the organization where this application or proceeding is assigned is 703- 
872-9306. 

Any inquiry of a general nature or relating to the status of this application 
or proceeding should be directed to the receptionist whose telephone number is 571- 



272-2100. 



Joseph Pan 
November 16, 2007 




